Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/4d315d-63a8-44b0-b8a3-b774c3ea9dbb/1/qQcj6hJVTVL0ZzoaSHifPQWniaA.mft
File: qQcj6hJVTVL0ZzoaSHifPQWniaA.mft (raw, json)
Hash identifier: lHbEwLVVPbiSwa+HkN2wp8OlztqJpFVDJC98/OCbOjA=
Subject key identifier: 5A:0E:4A:69:F2:63:F9:2D:5D:F5:1E:D2:E6:ED:43:D6:51:6A:F4:5D
Authority key identifier: A9:07:23:EA:12:55:4D:52:F4:67:3A:1A:48:78:9F:3D:05:A7:89:A0
Certificate issuer: /CN=a90723ea12554d52f4673a1a48789f3d05a789a0
Certificate serial: 019754FE7DF62BAE621837C559D5F5A20536
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQcj6hJVTVL0ZzoaSHifPQWniaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/4d315d-63a8-44b0-b8a3-b774c3ea9dbb/1/qQcj6hJVTVL0ZzoaSHifPQWniaA.mft
Manifest number: 1213
Signing time: Mon 09 Jun 2025 14:00:53 +0000
Manifest this update: Mon 09 Jun 2025 14:00:53 +0000
Manifest next update: Tue 10 Jun 2025 14:00:53 +0000
Files and hashes: 1: qQcj6hJVTVL0ZzoaSHifPQWniaA.crl (hash: uwSmMRhFFUwlugYI2j90bmorZRgBjofrC3D9BeNk3uI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/4d315d-63a8-44b0-b8a3-b774c3ea9dbb/1/qQcj6hJVTVL0ZzoaSHifPQWniaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/4d315d-63a8-44b0-b8a3-b774c3ea9dbb/1/qQcj6hJVTVL0ZzoaSHifPQWniaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQcj6hJVTVL0ZzoaSHifPQWniaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 11:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:fe:7d:f6:2b:ae:62:18:37:c5:59:d5:f5:a2:05:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90723ea12554d52f4673a1a48789f3d05a789a0
Validity
Not Before: Jun 9 14:00:53 2025 GMT
Not After : Jun 10 14:00:53 2025 GMT
Subject: CN=5a0e4a69f263f92d5df51ed2e6ed43d6516af45d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:85:6b:71:71:19:92:34:fd:eb:73:e7:84:c5:
31:bf:c2:75:a4:0a:c4:1a:24:77:47:e2:71:18:cc:
ff:fa:8d:e8:4b:81:93:e4:75:ac:a6:60:a2:85:4d:
20:6b:e1:3e:05:44:74:03:72:98:52:ab:32:3f:31:
40:9b:d7:9e:f9:c8:a2:59:e9:5e:5a:3e:20:54:93:
a5:17:89:ef:14:56:3a:4d:fe:85:80:37:bd:4b:8d:
e5:45:48:97:e8:d9:7f:1b:64:65:0b:40:28:c7:42:
29:f5:9e:95:a5:dd:1c:87:c5:c8:f4:87:58:d1:8b:
ba:37:19:41:a6:93:ed:a9:75:c6:d7:23:32:7f:aa:
9b:59:72:75:49:89:10:c0:6f:5b:11:0e:8b:71:a3:
09:e3:bd:7e:6c:83:d0:84:bf:23:79:84:cb:fd:7a:
a5:3b:fe:fc:a4:54:17:14:e6:39:f5:97:61:19:3c:
86:b2:16:d3:00:38:6d:3c:f1:9d:18:7f:55:b5:93:
df:9a:b2:3a:2b:15:36:ce:fe:86:77:8c:6e:3c:23:
cf:2e:5c:89:79:f7:95:3d:6b:fe:59:a7:fe:c7:ea:
02:17:3b:de:3e:6a:f7:2c:b3:5a:c1:92:14:50:06:
72:1f:bf:5c:84:86:04:1f:5f:0b:62:c9:34:6a:69:
c2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:0E:4A:69:F2:63:F9:2D:5D:F5:1E:D2:E6:ED:43:D6:51:6A:F4:5D
X509v3 Authority Key Identifier:
keyid:A9:07:23:EA:12:55:4D:52:F4:67:3A:1A:48:78:9F:3D:05:A7:89:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQcj6hJVTVL0ZzoaSHifPQWniaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/4d315d-63a8-44b0-b8a3-b774c3ea9dbb/1/qQcj6hJVTVL0ZzoaSHifPQWniaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/4d315d-63a8-44b0-b8a3-b774c3ea9dbb/1/qQcj6hJVTVL0ZzoaSHifPQWniaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:7f:3d:87:64:b6:b5:df:17:db:bb:14:01:36:51:d6:7e:c8:
4f:ff:59:eb:f5:b4:2c:20:b7:ca:c0:3f:a9:b7:e4:eb:e8:0e:
f2:92:63:95:91:95:bc:c9:d4:09:65:91:cd:9c:2b:a2:0a:a4:
aa:79:66:79:c3:7c:e9:fd:2d:c9:e1:e2:18:41:58:60:8d:06:
a6:30:4c:e4:65:47:84:6b:13:07:84:1b:dc:01:d1:c6:5c:90:
43:d0:ff:d5:f5:0e:99:5e:7d:8d:67:cd:0b:7f:db:8b:16:44:
7a:75:02:83:49:4a:37:70:ca:69:22:eb:3f:5b:fd:dc:2a:b5:
d8:60:42:d5:86:58:85:2d:e4:c6:5d:54:f9:79:56:9d:84:f0:
04:a4:02:22:c1:33:c3:70:17:df:66:f6:29:6c:30:dc:87:91:
20:d4:95:3d:05:e0:d6:21:dc:5b:0d:01:d5:de:9b:18:75:67:
b1:1a:c0:18:38:f0:1d:83:b1:c1:1c:fc:7c:17:fc:b1:87:af:
00:1b:ff:dc:85:69:d0:4b:70:c8:1c:5c:bc:7a:f8:14:a3:9e:
fc:d6:d7:71:e5:e6:ff:62:f7:e7:db:67:03:07:ad:95:a0:3b:
c1:ba:2a:fc:15:52:23:65:1a:48:ac:85:1a:a1:eb:75:f3:a8:
a1:3b:07:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdU/n32K65iGDfFWdX1ogU2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5MDcyM2VhMTI1NTRkNTJmNDY3M2ExYTQ4Nzg5ZjNkMDVh
Nzg5YTAwHhcNMjUwNjA5MTQwMDUzWhcNMjUwNjEwMTQwMDUzWjAzMTEwLwYDVQQD
Eyg1YTBlNGE2OWYyNjNmOTJkNWRmNTFlZDJlNmVkNDNkNjUxNmFmNDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIVrcXEZkjT963PnhMUxv8J1pArE
GiR3R+JxGMz/+o3oS4GT5HWspmCihU0ga+E+BUR0A3KYUqsyPzFAm9ee+ciiWele
Wj4gVJOlF4nvFFY6Tf6FgDe9S43lRUiX6Nl/G2RlC0Aox0Ip9Z6Vpd0ch8XI9IdY
0Yu6NxlBppPtqXXG1yMyf6qbWXJ1SYkQwG9bEQ6LcaMJ471+bIPQhL8jeYTL/Xql
O/78pFQXFOY59ZdhGTyGshbTADhtPPGdGH9VtZPfmrI6KxU2zv6Gd4xuPCPPLlyJ
efeVPWv+Waf+x+oCFzvePmr3LLNawZIUUAZyH79chIYEH18LYsk0amnCbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFoOSmnyY/ktXfUe0ubtQ9ZRavRdMB8GA1UdIwQY
MBaAFKkHI+oSVU1S9Gc6Gkh4nz0Fp4mgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVFjajZoSlZUVkwwWnpvYVNIaWZQUVduaWFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC80ZDMxNWQtNjNhOC00NGIwLWI4YTMt
Yjc3NGMzZWE5ZGJiLzEvcVFjajZoSlZUVkwwWnpvYVNIaWZQUVduaWFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC80ZDMxNWQtNjNhOC00NGIwLWI4YTMtYjc3NGMzZWE5ZGJi
LzEvcVFjajZoSlZUVkwwWnpvYVNIaWZQUVduaWFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARX89h2S2
td8X27sUATZR1n7IT/9Z6/W0LCC3ysA/qbfk6+gO8pJjlZGVvMnUCWWRzZwrogqk
qnlmecN86f0tyeHiGEFYYI0GpjBM5GVHhGsTB4Qb3AHRxlyQQ9D/1fUOmV59jWfN
C3/bixZEenUCg0lKN3DKaSLrP1v93Cq12GBC1YZYhS3kxl1U+XlWnYTwBKQCIsEz
w3AX32b2KWww3IeRINSVPQXg1iHcWw0B1d6bGHVnsRrAGDjwHYOxwRz8fBf8sYev
ABv/3IVp0EtwyBxcvHr4FKOe/NbXceXm/2L359tnAwetlaA7wboq/BVSI2UaSKyF
GqHrdfOooTsHvg==
-----END CERTIFICATE-----
Generated at Mon Jun 9 16:33:02 2025 by rpki-client